ORSO auditor fined HK$196,000 and barred 18 months

The Accounting and Financial Reporting Council (AFRC) on 27 October sanctioned audit firm Norton Rowland CPA Limited and its engagement director, Hung Chi Yuen, Andrew, for serious deficiencies in statutory audit and assurance engagements relating to two occupational retirement schemes registered under the Occupational Retirement Schemes Ordinance (Cap. 426). Both were publicly reprimanded and fined HK$98,000 each — HK$196,000 in total — and barred for 18 months from taking on audit or assurance work for MPF schemes and occupational retirement schemes registered with the MPFA. The MPFA, as Registrar of Occupational Retirement Schemes, the same day issued a supervisory directive reminding scheme administrators and employers of their statutory audit obligations.

Insufficient evidence, over-reliance on trustee and actuary

The action arose from an AFRC inspection covering the 2023 financial statement audits and compliance assurance work of the two schemes — one defined benefit and one defined contribution — which held net assets available for benefits of approximately HK$1.4 billion and HK$59 million respectively. The AFRC found significant and pervasive deficiencies: in key areas such as investments, benefits paid or payable to members, and liabilities, the firm failed to perform adequate procedures to obtain sufficient appropriate audit evidence, and relied excessively on information from those preparing the financial statements, including the trustee and actuary, without independently verifying it.

Assurance reports used MPF wording, omitted ORSO statements

The deficiencies extended to assurance work: the firm concluded the schemes complied with prescribed ORSO requirements without performing adequate procedures, used wording intended for MPF schemes rather than occupational retirement schemes, and omitted statements required under the ordinance. The AFRC said the findings raised serious concerns over competence. There was no evidence of actual misstatements or statutory non-compliance, but the risk of such matters going undetected was increased; the penalties were reduced for cooperation and full admission of the misconduct.

18-month ban from MPF and ORSO audit engagements

The practice limitation runs from 26 October 2026 to 25 April 2028, during which the firm and the director must not accept, perform or participate in any audit or assurance engagements for MPF schemes and occupational retirement schemes registered with the MPFA. Hung must also complete additional verifiable continuing professional development hours in specified areas before participating in such engagements. Hester Leung, the AFRC’s Head of Discipline, said retirement scheme engagements are not routine compliance exercises and require specialised expertise — this case shows the risks when auditors underestimate that complexity.

MPFA directive: vet auditors before appointment

The MPFA, which registers and supervises occupational retirement schemes, issued a supervisory directive to scheme administrators and relevant employers the same day, reminding them of their obligations under the ordinance to appoint suitable auditors and to conduct due diligence before appointing or reappointing scheme auditors. The MPFA and the AFRC collaborate on audit-related matters for occupational retirement schemes, including statutory information sharing and regulatory coordination, aiming to further strengthen audit quality and member protection.